Many of the categories are singular so that they can be used as tags. If a page describes a vulnerability, you tag it with Category:Vulnerability. I think the redirect approach is appropriate though. Jeff Williams